CVE-2019-25021

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.

• CWE-798

• https://suid.ch/research/CVE-2019-25021.htmlExploit, Third Party Advisory
• https://suid.ch/research/CVE-2019-25021.htmlExploit, Third Party Advisory

Published

Feb 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25016In OpenDoas from 6.6 to 6.8 the users PATH variable was inco…8.8
• CVE-2019-25017An issue was discovered in rcp in MIT krb5-appl through 1.0.…5.9
• CVE-2019-25018In the rcp client in MIT krb5-appl through 1.0.3, malicious …7.5
• CVE-2019-25019LimeSurvey before 4.0.0-RC4 allows SQL injection via the par…9.8
• CVE-2019-2502Vulnerability in the MySQL Server component of Oracle MySQL …4.9
• CVE-2019-25020An issue was discovered in Scytl sVote 2.1. Because the sdm-…7.5
• CVE-2019-25022An issue was discovered in Scytl sVote 2.1. An attacker can …9.8
• CVE-2019-25023An issue was discovered in Scytl sVote 2.1. Because the IP a…6.5
• CVE-2019-25024OpenRepeater (ORP) before 2.2 allows unauthenticated command…9.8
• CVE-2019-25025The activerecord-session_store (aka Active Record Session St…5.3
• CVE-2019-25026Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup…5.3
• CVE-2019-25027Missing output sanitization in default RouteNotFoundError vi…6.1